Tactic 1 Adopt Least Privilege Zaid Arafeh Clare

  • Slides: 22
Download presentation
Tactic 1: Adopt Least Privilege Zaid Arafeh, Clare Kearney Microsoft Services Cybersecurity Source: Engineering

Tactic 1: Adopt Least Privilege Zaid Arafeh, Clare Kearney Microsoft Services Cybersecurity Source: Engineering journal - 'The White Star liner Titanic', vol. 91.

• Part I: Understanding Tier-0 • Part II: Minimizing Privilege

• Part I: Understanding Tier-0 • Part II: Minimizing Privilege

AD Forest Tier-0 Security Dependencies Global Access Control Tier-1 Enterprise Data & Services Tier-2

AD Forest Tier-0 Security Dependencies Global Access Control Tier-1 Enterprise Data & Services Tier-2 Devices and Users AD Service & Dependencies AD Data

AD Forest

AD Forest

• • • The Domain Admins group Members of the Backup Operators group

• • • The Domain Admins group Members of the Backup Operators group A Domain Controller (DC) A virtualization host running a DC A Config Manager server managing a DC

Napoléon Bonaparte 1769 - 1821

Napoléon Bonaparte 1769 - 1821

• Ensuring that the size of tier-0 is kept to a minimum. Ex:

• Ensuring that the size of tier-0 is kept to a minimum. Ex: • Effectively protecting tier-0 components. Ex:

AND TREAT THEM AS SUCH

AND TREAT THEM AS SUCH

Steal NTDS. DIT SID History attacks Change default security descriptors Deploy Malware Disguise legit

Steal NTDS. DIT SID History attacks Change default security descriptors Deploy Malware Disguise legit tools as updates to call malware Link malicious GPO to entire site

• For Built-in Tier-0 Groups • For resource management • For tier management

• For Built-in Tier-0 Groups • For resource management • For tier management • For service accounts

• • Administrators Domain Admins Enterprise Admins Schema Admins Backup Operators Server Operators

• • Administrators Domain Admins Enterprise Admins Schema Admins Backup Operators Server Operators Print Operators Account Operators

• Minimize privileged group membership • Configure alerting on privileged groups

• Minimize privileged group membership • Configure alerting on privileged groups

• Tactic #2: Protect Privileged Identities

• Tactic #2: Protect Privileged Identities

• AD ACL Scanner Tool by Robin Granberg • Active Directory Group Descriptions

• AD ACL Scanner Tool by Robin Granberg • Active Directory Group Descriptions • Need help from Microsoft Services Cybersecurity? Cyber. RFI@microsoft. com

Tactic 4 Defend Your Domain Controllers Zaid ArafehTactic 4 Defend Your Domain Controllers Zaid Arafeh
Defending Active Directory Against Cyberattacks Zaid Arafeh ClareDefending Active Directory Against Cyberattacks Zaid Arafeh Clare
Privilege Privilege defined A privilege is a specialPrivilege Privilege defined A privilege is a special
Dr Clare Embling clare emblingplymouth ac uk ClareDr Clare Embling clare emblingplymouth ac uk Clare
Tactics What is a tactic A tactic isTactics What is a tactic A tactic is
Module 4 Fallacies Zaid Ali Alsagoff zaid alsagoffgmailModule 4 Fallacies Zaid Ali Alsagoff zaid alsagoffgmail
Tactic 3 Defend your Directory Josh Bryant ClareTactic 3 Defend your Directory Josh Bryant Clare
Brainstorming Jai adopt Je nai pas encore adoptBrainstorming Jai adopt Je nai pas encore adopt
VO Privilege Activity VO Privilege Activity The VOVO Privilege Activity VO Privilege Activity The VO
Pondering Privilege What Would Archival Privilege Look LikePondering Privilege What Would Archival Privilege Look Like
Privilege A privilege is a right to executePrivilege A privilege is a right to execute
Maintaining Employee Privilege Templates Concept Maintaining Employee PrivilegeMaintaining Employee Privilege Templates Concept Maintaining Employee Privilege
LISENSI PERSONAL PRIVILEGE Privilege Pengantar Oemar Seno AdjiLISENSI PERSONAL PRIVILEGE Privilege Pengantar Oemar Seno Adji
Privilege Levels Current Privilege LevelCPL Also called TaskPrivilege Levels Current Privilege LevelCPL Also called Task
PRIVILEGE AND CONFIDENTIALITY GGGGGGGGGGG General LEGAL ADVICE PRIVILEGEPRIVILEGE AND CONFIDENTIALITY GGGGGGGGGGG General LEGAL ADVICE PRIVILEGE
Centara Privilege Club Mobile App CENTARA PRIVILEGE CLUBCentara Privilege Club Mobile App CENTARA PRIVILEGE CLUB
Understanding Privilege Oppression Privilege A special right advantageUnderstanding Privilege Oppression Privilege A special right advantage
Intersection of privilege against selfincrimination and attorneyclient privilegeIntersection of privilege against selfincrimination and attorneyclient privilege
What is a Privilege n n A privilegeWhat is a Privilege n n A privilege
Reporters Privilege Communication Law Regulation REPORTERS PRIVILEGE PrivilegedReporters Privilege Communication Law Regulation REPORTERS PRIVILEGE Privileged
St Clare of Assisi Reflections 1 St ClareSt Clare of Assisi Reflections 1 St Clare